When adware reads your browsing history

An unwanted browser extension can quietly record the websites you open and use that activity for advertising, redirect traffic or display intrusive ads. When adware installs an extension that reads browsing history, deleting pop-ups alone is not enough; the extension, its permissions and any account changes also need attention.

Start by identifying the affected browser, removing the extension through built-in controls, then securing accounts and checking for signs of a wider infection. This sequence limits further exposure without clearing useful security evidence too soon.

Understand what the extension can access

Adware is often bundled with free software, cracked programs or misleading browser offers. Its installer may add an extension, alter the default search engine and place advertising links on the new-tab page. These changes can appear legitimate because they operate inside a familiar browser window.

Permissions such as browsing history, tabs and access to all websites let an extension build a detailed activity profile. This matters for commuters in Sydney or Melbourne who move between home Wi-Fi, mobile hotspots and shared café networks: HTTPS protects traffic in transit, but it does not stop an authorised extension from observing pages after they load.

Confirm where it was installed

Open the browser’s extension manager and review recent additions rather than removing items blindly. Record the publisher, permissions and identifier because similar names can hide unrelated products. Australia’s heavy use of Android phones and Windows PCs makes Chrome and Edge common, so check signed-in profiles on Windows PCs, Macs and Android phones.

Look for changes that accompany an unwanted extension: a new homepage, altered search results, unfamiliar shortcuts or sudden ad-heavy tabs. Then use this compact checklist:

• Note the extension’s publisher, permissions, identifier and install source.
• Check every browser profile and synced computer, phone or tablet.
• Look for a changed homepage, search engine, shortcut or advertisement.
• Match each extension against programs and downloads installed recently.

Remove it without bringing it back

Remove the item from the extension manager rather than only switching it off. If the extension also exists as a desktop app, uninstall that package, restart the device and confirm the browser remains clean. On Mac, check Safari’s Extensions pane as well as any Chrome or Edge profile.

Before resetting everything, note which settings changed. Clear cookies and site data only after saving needed passwords, then restore the homepage and search settings from a trusted account. On a managed work or school device, contact IT instead of bypassing policy.

Compare the main cleanup routes

Choose the route that matches the browser and who controls the device:

Route	Where to act	What to check	Main limitation
Chrome or Chromium	Puzzle icon, then Extensions	Other profiles and synced devices	Sync or an enforced policy can restore it
Edge	Extensions icon, then Manage extensions	Profiles, startup pages and policies	Work or school controls may block removal
Safari	Settings, then Extensions	Synced devices and browser profiles	Synced data can carry the extension elsewhere
Firefox	Add-ons and Themes	Synced profiles and other add-ons	Sync can copy the add-on back
Managed device	IT administrator	Forced installs and allow lists	A local reset cannot remove administrator control

If removal fails, close all browser windows and inspect installed applications for a bundled adware package. Run Windows Security or your Mac’s built-in malware checks, and use Safe Mode only if the extension returns at every normal start.

Limit the damage to accounts and data

If banking, email or social media appeared in the captured activity, change the relevant password from its official app or site, sign out other sessions, enable multi-factor authentication and review recent sign-ins. Contact your Australian bank or card issuer promptly if payment credentials may have been exposed.

Deleting local browsing history does not erase data already collected. If typed content or email credentials were also captured, Pc Malware Expert’s keylogger removal guide outlines a deeper cleanup; history access by itself is not proof of keylogging.

Under the Privacy Act 1988 and Australian Privacy Principles, a covered entity must meet relevant collection, notice and security duties. Browsing history can be personal information when linked to an identifiable person. Unauthorised collection may need assessment under the Notifiable Data Breaches scheme, including notification to affected people and the Office of the Australian Information Commissioner. Individuals can also report suspected malware or scams to ReportCyber and Scamwatch.

Check for a wider malware infection

Adware that launches background downloads, changes files outside the browser profile or adds startup programs may have installed more than an extension. Run a full scan with trusted security software, review recent downloads and startup items, and remove related programs. Pc Malware Expert’s trojan removal guidance explains how to recognise and remove trojans and related threats.

If the same advertisements return after a clean restart, use Safe Mode or an offline scan, then seek professional support for managed or business devices. Do not install a supposed cleaner from the pop-up that triggered the problem.

Make future installs harder

Once cleanup is complete, make future permission grants deliberate. Review extensions after software installations, especially free utilities and browser offers, and remove anything you cannot name or explain.

• Install extensions only from official stores; verify the publisher and recent reviews.
• Decline browsing history or all-sites access unless the stated function requires it.
• Keep browser and operating system updates automatic, and scan periodically.

Use unique passwords stored in a password manager, enable multi-factor authentication and check synced devices after a device repair or account change. These habits turn extension review into a brief routine while keeping access limited to devices you trust.